The mailbox was the machine. Six years it ran on other people's names.

Marcus brought his W-2s in a manila envelope.

He was thirty-eight. He loaded trucks for a logistics outfit south of Baltimore, twelve-hour shifts, time and a half on Sundays. The refund was the closest thing he had to a savings plan. Every February he handed it to someone he trusted and waited for the deposit to hit.

A guy on his crew had told him about the office in Belcamp. Said the preparer there got bigger refunds than anywhere else. Said the man knew things. Marcus did not ask what things. He drove up Route 40 on a Saturday morning, parked next to a nail salon, and walked into a storefront where a printer was already running hot and the coffee on the desk had been there a while.

The man across the desk asked for his Social Security number. Marcus gave it. The man asked about dependents. Marcus said one, his daughter. The man typed for a long time without asking anything else.

Then he turned the screen around and showed Marcus a number bigger than the one he had gotten the year before. He pointed at a line on a Form 1040 and said sign here. Marcus signed. He did not read the return. He did not know what an Earned Income Tax Credit was. He did not know the man had added two dependents who did not exist, education expenses he had not paid, and income figures that made him eligible for credits he should not have qualified for.

The refund hit his account three weeks later. Marcus paid down a card. He bought his daughter a coat. He told the guy on his crew the man was good.

He did not know yet that his name had just been added to a list.

I.

The man on the other side of the desk was Daiwor Woah-Tee, fifty-three, of Belcamp, Maryland. He also went by Mark Brown. On June 4, 2026, federal prosecutors in the District of Maryland announced he had pleaded guilty in U.S. District Court to conspiracy to submit false claims to the IRS and to wire fraud conspiracy.

Read the dates slowly. The scheme operated from January 2018 through December 2024. Almost seven years. Two presidential administrations. One pandemic. One emergency expansion of federal benefits.

A tax preparation business is a useful thing to run if what you actually want is a pipeline for other people's Social Security numbers. The client walks in voluntarily. The client hands over the document with their name on it. The client signs whatever you put in front of them because they came to you for exactly this reason: they do not understand the form and they want someone else to fill it out.

According to the plea agreement, Woah-Tee and his co-conspirators used that pipeline two ways.

The first way was the IRS. They filed Form 1040s containing what the Department of Justice described as fabricated information about dependents, income, education expenses, and Earned Income Tax Credit eligibility. The Earned Income Tax Credit is a refundable credit. That word matters. Refundable means the government sends you money even if you owed no tax. It is one of the largest anti-poverty programs in the country, and it is one of the largest fraud surfaces in the federal budget. Prosecutors say the scheme sought at least $3.5 million in refunds the filers were not entitled to.

The second way was the Maryland Department of Labor. When the CARES Act expanded unemployment insurance in March 2020, the federal government created a category of benefits called Pandemic Unemployment Assistance. It paid people who would not normally qualify, including the self-employed and gig workers. To get it, you submitted an application. The state did not have the staff to verify most of them. The DOJ says Woah-Tee and his co-conspirators submitted those applications on behalf of victims, often without their knowledge, and collected more than $550,000.

That phrase. Without their knowledge.

It is doing a lot of work.

II.

Picture what without their knowledge looks like from inside Marcus's apartment.

It is fourteen months after he signed the Form 1040. He has filed another return since then, with a different preparer because the man in Belcamp got hard to reach. The new return was rejected. The IRS system flagged it as a duplicate filing for the same Social Security number. Someone, the letter said, had already filed using his identity.

Marcus calls the number on the letter. He sits on hold for two hours. He explains that he is the real Marcus, that he did file last year, that he signed something but did not understand what. The agent asks him about a refund of an amount Marcus has never seen. She asks about a Maryland unemployment claim filed in his name in 2021, during a year he worked every shift the warehouse offered. She asks whether he received the benefits. He says no.

She tells him he will need to file an identity theft affidavit. She tells him the matter is under review. She tells him this may take eighteen months. She does not tell him that the credit reporting agencies have already received notices. She does not tell him that the next time he applies for a car loan, the application will come back at a rate he cannot afford, and he will not know why.

This is the part of the machine that does not appear in the press release. The press release says $3.5 million to the IRS and $550,000 to the Department of Labor. The press release does not say how many Marcuses are still on hold.

III.

The plea agreement attaches numbers to a business model.

$3.5 million in restitution to the Internal Revenue Service. $550,000 in restitution to the Maryland Department of Labor. Approximately $4 million in forfeiture. Up to 10 years on the false claims conspiracy. Up to 20 years on the wire fraud conspiracy. Up to two additional years for aggravated identity theft.

Read those numbers next to the timeline. Seven years of operation. A storefront. A printer. A list of clients who walked in voluntarily and a separate list of names that may never have walked in at all.

The case was investigated by IRS Criminal Investigation, the Department of Labor's Office of Inspector General, and the Department of Homeland Security's Office of Inspector General. Three federal agencies. Assistant U.S. Attorneys Jared W. Murphy and Matthew P. Phelps are prosecuting.

It is one case in a sequence. On May 16, 2026, a contractor for the Maryland Department of Labor named Kiara Smith was sentenced to 42 months for her role in a $3.5 million unemployment fraud conspiracy. On May 21, Terry Chen of Prince George's County was sentenced to six years for a CARES Act UI fraud that obtained more than $3.5 million. On June 3, Kendra Scarborough of Oxon Hill pleaded guilty to attempting to steal more than $1.1 million through false IRS filings. On June 4, in a separate case, Simeon Bakare of Waldorf pleaded guilty to wire fraud for obtaining more than $176,000 in fraudulent CARES Act applications.

Five cases in three weeks. One state. One pattern.

Maryland recovered roughly $520 million in suspected fraudulent unemployment payments during the pandemic, according to state disclosures. That is the floor of what they caught.

IV.

The thing to understand about a tax preparer fraud is that it does not require trust to be broken. It requires trust to be given.

A Ponzi scheme needs you to believe in extraordinary returns. A romance scam needs you to believe in extraordinary love. A tax preparer fraud only needs you to believe that someone who has a desk and a printer knows the rules better than you do.

That is a reasonable thing to believe.

The IRS code is six thousand pages. The Form 1040 instructions for 2023 ran to one hundred and twelve pages. The Earned Income Tax Credit alone has its own thirty-seven-page publication. If you load trucks for twelve hours and have a daughter who needs a coat, you are not going to read any of that. You are going to drive to a strip mall and trust the man at the desk.

The man at the desk knew that.

V.

Marcus still has the manila envelope. He keeps it in a drawer with the IRS letter and the identity theft affidavit he filed and the copy of the Form 1040 he requested from the IRS, which he has now read for the first time, two years after he signed it.

There are two children listed as dependents on the return. He only has one.

He does not know who the other child is. There is a name and a Social Security number where his daughter's information should appear a second time, and he does not know if it is a real child or a child invented for the credit. He does not know if somewhere in Maryland another parent is also looking at a Form 1040 they did not write, wondering the same thing.

That part may be the saddest. The pipeline did not consume one identity at a time. It braided them together. A return filed in Marcus's name might claim a dependent whose Social Security number was harvested from a different client three years earlier. The fraud was not a series of thefts. It was a network.

When the federal government says $3.5 million, it is reporting the dollars. It is not reporting the connective tissue. It is not reporting how many returns will need to be unwound, how many credit files will need to be cleaned, how many people who have done nothing wrong will spend years explaining to lenders why their record says what it says.

Daiwor Woah-Tee will be sentenced later this year. He has agreed to restitution and forfeiture. The plea calls the scheme a conspiracy, which means there are other people. Some of them may already be charged. Some of them may not be.

The storefront in Belcamp is closed. The printer is gone. The coffee cups have been thrown away.

The names are still out there. They will be out there for a long time.

Marcus signed.

That was the moment the machine had been waiting for.